turbot / steampipe-plugin-okta

Use SQL to instantly query users, groups, applications and more from Okta. Open source CLI. No DB required.
https://hub.steampipe.io/plugins/turbot/okta
Apache License 2.0
8 stars 4 forks source link

Add service application authentication #22

Closed ctennis closed 3 years ago

ctennis commented 3 years ago

I can confirm this works great, and is a much more secure way of configuring API access into Okta (though is a bit more work to initially setup).

cbruno10 commented 3 years ago

Thanks @ctennis for the pull request! We'll review this tomorrow and let you know if we have any feedback.

cbruno10 commented 3 years ago

@ctennis Hey, while testing and looking for additional scopes, we couldn't seem to find the scope to include for the okta_user_type table; when we try to query that table using a private key, we receive an error. Just curious, did you run across any scopes for this resource type while searching?

ctennis commented 3 years ago

@ctennis Hey, while testing and looking for additional scopes, we couldn't seem to find the scope to include for the okta_user_type table; when we try to query that table using a private key, we receive an error. Just curious, did you run across any scopes for this resource type while searching?

You're right, I can't seem to find a scope here either. I'll open a service ticket with Okta, the API for this lives under the /meta hierarchy and I wonder if they just overlooked it.

ctennis commented 3 years ago

Confirmed with Okta, this particular API isn't supported via oauth. I upvoted the case regarding it. Not a blocker for us, but I suppose a limitation of this particular table.

https://ideas.okta.com/app/#/case/132309

LalitLab commented 3 years ago

Confirmed with Okta, this particular API isn't supported via oauth. I upvoted the case regarding it. Not a blocker for us, but I suppose a limitation of this particular table.

https://ideas.okta.com/app/#/case/132309

Thank you for checking the details that far.

cbruno10 commented 3 years ago

Thanks again @ctennis for the contribution, appreciate it!